Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: osLCgFI9H9VmC29K54gekD/+GzqtNUHOj8WuyZeDWnA=
Subject key identifier: 00:2C:EA:87:CB:CC:67:3E:A8:2D:75:66:05:61:6A:1A:4B:2B:48:50
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 0194BCA97590B4F30781FD223F4EE59C3B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 08D2
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: KwivnAC/Y3tsZPc6M0Hv/6Io8Q9PJXmlZuXu92Invs8=)
2: xBLWMt7CnhdMhsDQsxTJKsgubzw.roa (hash: ZCdYsbGv+ldj13bvl4ML8UTblRYPsZ2+PffnDm+YrGQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:75:90:b4:f3:07:81:fd:22:3f:4e:e5:9c:3b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=002cea87cbcc673ea82d756605616a1a4b2b4850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c5:42:d7:7a:f9:23:2b:4f:89:48:26:6e:c7:
50:ed:33:8c:2b:82:26:d6:36:a8:73:7b:23:bf:18:
79:b3:3a:0b:be:af:7b:23:69:3b:6e:60:e9:72:99:
b0:70:4d:2b:5c:45:85:c0:67:9d:61:c0:22:f9:0a:
72:67:72:15:e0:f2:7d:39:c1:b5:70:8e:9c:ae:3e:
99:a6:38:34:b7:f9:20:d4:39:81:8c:66:b0:99:f2:
34:b9:94:02:e8:74:a7:ba:da:b2:e7:56:f7:da:f5:
f5:5d:df:4c:8f:82:e2:fb:d2:6f:9f:c6:18:fa:65:
02:70:80:7d:13:db:17:83:4f:76:47:d4:be:03:a7:
74:4b:f0:50:91:74:7d:d5:ff:8d:06:06:95:22:27:
8d:67:4b:b1:9b:51:6c:f8:99:d4:26:0f:96:d0:f5:
c2:84:7c:08:6b:98:b6:66:a9:4a:02:49:6e:76:2d:
73:c1:90:8f:c2:b9:7f:39:64:aa:3d:3e:8d:32:66:
78:a8:aa:01:6c:b7:76:a2:ef:0e:46:52:7e:52:bd:
6b:1a:b6:1c:b3:f6:ec:c8:03:23:af:b2:80:2e:a7:
e6:85:50:53:1b:a1:8f:d5:32:4b:3c:64:c3:df:a8:
9e:c5:2e:e4:99:44:84:10:50:ba:e7:21:66:c9:dc:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2C:EA:87:CB:CC:67:3E:A8:2D:75:66:05:61:6A:1A:4B:2B:48:50
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:46:86:d5:cb:42:43:2b:ba:fc:17:69:d7:8c:5b:f8:87:d9:
3d:7c:7a:24:56:87:ab:05:33:fb:12:81:7c:e4:b1:62:49:fd:
b4:98:76:67:09:f9:60:43:b8:52:d5:96:c4:ec:1e:07:22:a0:
9c:13:45:10:f5:d0:12:8f:bf:76:30:71:47:70:63:23:15:82:
a8:19:d9:7a:29:10:ce:09:a4:20:b7:39:8d:44:e6:4b:0f:e5:
fc:4f:d4:e2:93:c0:29:28:31:cc:65:c3:a5:42:ed:1c:54:2c:
f9:15:9f:22:ef:4f:a6:00:cd:45:61:0c:00:ef:82:90:6f:62:
66:61:02:eb:36:86:f9:74:00:ae:d3:4f:4d:a5:c0:5f:25:fa:
ed:a6:2f:04:b5:08:23:d2:9c:d2:9e:70:72:23:c5:9b:49:f4:
db:99:77:df:1e:0e:58:13:84:e6:db:c8:0b:90:d6:4d:e3:ad:
22:5e:e8:73:d5:e1:9f:61:60:75:70:cc:12:52:cc:6f:e7:5d:
73:b6:4b:59:bc:ba:ce:65:81:0a:e6:4d:c3:25:c5:d3:2d:b0:
39:c7:fa:5e:7f:98:55:d5:31:39:90:65:9b:85:f7:40:44:6c:
92:95:4d:c3:09:3f:f9:9e:38:f6:a1:ea:66:47:2e:27:0e:0e:
1f:c0:10:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:35 2025 by rpki-client